X 

MAR- 14-2006 21:0£ FROM : MOTOROLA PCS IPD 18475232350 TO:USPTO P.l'SB 


RECEIVED 

CENTRAL FAX CENTER 

MAR 1 h 2006 


Intellectual Property Section 
Law Department 


FAX COVER SHEET 


DATE: 

March 14. 2006 


TO: 

EXAMINER SHIN 

571-272-3920 


(ADDRESSEE'S NAME) 
ART UNIT 2143 

(EXTENSION) 
571-273-8300 


(LOCATION) 

(FAX NUMBER) 

FROM: 

MATTHEW C. LOPPNOW 

(847) 523-2585 


(SENDER'S NAME) 

(EXTENSION) 

RE: 

APPLICATION NO.: 09/575.749 



TOTAL NUMBER OF PAGE(S) 2° (INCLUDING THIS PAGE) 


NOTICE : This facsimile transmission may contain information that is confidential, privileged or 
exempt from disclosure under applicable law. It is intended only for the person(s) to whom it is 
addressed. Unauthorized use. disclosure, copying or distrfbution may expose you to legal 
liability. If you have received this transmission in error, please immediately notify us by telephone 
(collect) to arrange for return of the documents received and any copies made. Thank you. 

Personal Communications Sector 
600 North U.S. Highway 45, AN 475 
Libertyvilfe, IL 60048 

Phone: (847) 523-2322 Facsimile: (847) 523-2350 


PAGE 1/20 * RCVD AT 3/14/2006 10:07:55 PM [Eastern Standard Time] * SVR:USPTO-EFXRF-2/17 * DNIS:2738300 * CSID:18475232350 1 DURATION (mm*s):05<58 


HRR-14-S006 £1:02 FROM: MOTOROLA PCS IPD 18475S32350 


TO:USPTO 


10 


RECEIVED 

CENTRAL FAX CENTER 

MAR H 2006 


I hereby certify that this correspondence is being facsimile 

transm itted to the tLS, Patdiit and Trademark Office (Fax No> j 

57 1 ~273-830P) on the date indicated below. . i 

ti>a fc March 14:2006 .... 1 



IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 
APPLICANT: Alberthetal. EXAMINER: Shin,K. 

SERIAL NO,: 09/575,749 GROUP: 2143 

FILED: May 22, 2000 CASE NO.: CS10614 

ENTITLED: SMART CARD WITH BACK UP 


Motorola, Inc. 

15 Intellectual Property Department 

600 North U.S. Highway 45 
Libcrtyville, IL 60048 

APPEAL BRIEF UNDER 37 C.F.R, g 4137 

20 

MS Appeal Brief - Patents 
Commissioner for Patents 
P.O. .Box 1450 
25 Alexandria, VA 223 1 3- 1 450 

Sir: 

Further to the Notice of Appeal filed on January 10, 2006, Applicant submits the 
30 present Appeal Brief. 
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L RE A L PARTY IN INTEREST 

The real party in interest is, Motorola, Tnc. 
5 U. RELATED APPEALS AND INTERFERENCES 

There are no related appeals or interferences. 
IH. STATUS OF CLAIMS 

10 

Claims 1-19 are pending. Claims 1-1 9 are rejected and are the subject of the present 

appeal. 

TV. STATUS OF AMENDMENTS 

15 

No amendments were filed subsequent to final rejection. 
V. SUMMARY OF CLAIMED SUBJECT MATTER 

20 The inventions are drawn generally to a method and apparatus for securely storing data 

in a personal data security device commonly known as a smart card (page 1 % lines 4-6, Fig. 1, 
element 1 00). An additional layer of security is provided to the smart card (100) in the form 
of a second part (112), such as an enabling key, of the smart card, which when coupled to a 
first part ( 102) of the smart card, enables the processor on the smart card to access and change 

25 stored information and to grant access to a third device to stored information. If the second 
part (112) is not accessible to the first part (102), die smart card function remains disabled 
(page 2, lines 10-14 and page 5, lines 19-22). 

VL GROUNDS OF REJECTION TO BE REVIEWED ON APPEAL 

30 

Whether claims 1-17 are allowable under 35 U-S.C. § 1 03 over Storck et al (U.S. 
Patent No. 5,434,395), Kawan et al. (U.S. Patent No. 6,289,324), and Kramer et al. (U.S. 
Patent No. 6,324,525). 
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Whether claims 18 and 19 are allowable under 35 U.S.C. § 103 over Storck et al. and 
Kawan et at. 


10 


VII. ARGUMENT 

Claim Limitations At Issue 

The limitations at issue in claims 1 ? 8, 14, and 18 are italicized below: 


1 . A personal data storage apparatus comprised of: 

a- a first personal data storage device including a memory device storing: 

i . a first set of user data; 

ii. a first encryption key for encrypting at least part of said first set 

15 of user data; 

b. a first interface circuit coupled to said memory device granting 
conditional access to a third device to data therein using an appropriate data exchange 
protocol between the first personal data storage device and the third device only when a 
second personal data storage device is operativefy coupled to said first personal data storage 

20 device; and 

c. a second interface circuit coupled to said memory device and providing 
communications access to the second personal data storage device. 

8. A personal data storage apparatus comprised of: 
25 a. a first personal data storage device comprising: 

i. a first memory device storing: 

1 . a first set of user data; 

2. a first encryption key for encrypting at least part said 

first set of user data; 

30 i i. a first interface circuit coupled to said memory device granting 

conditional access to data therein using a predetermined protocol and only -when a second 
personal data storage device is operativefy coupled to said first personal data storage device; 
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iii. a second interface circuit coupled lo said memory device and 
providing access to a second personal data storage device; 

b. a second personal data storage device coupled to said first personal data 
storage device and being comprised of: 

5 L a second memory device storing: 

1 . a substantially duplicate copy of said first set of user 

data; 

c. a second encryption key for encrypting at least part said first set of user 

data; 

10 ii. a second interface Circuit coupled to said memory device 

granting conditional access to data therein using a predetermined protocol and only when 
said second personal data storage device is operatively coupled to said first personal data 
storage device] 

whereby user data in either said first or second personal data storage device is 
1 5 accessible and usable only when said first and second personal data storage devices are in 

communication with each other. 

1 4. A method of securing access to data stored in a personal data storage device 
comprised of the steps of: 
20 a. storing personal data in first and second data storage devices that are 

capable of being operably coupled to each other; 

b. encrypting said personal data in a first data storage device using a first 
encryption key and encrypting it in said second data storage device using a second encryption 
key; 

25 c. granting access to a third device to said personal data in either said 

first data storage device or said second data storage device only when said first and second 
data storage devices are operatively coupled together. 

18. A method of securing access to data stored in a personal data storage device 
30 comprised of the steps of: 

a. storing personal data in a smart card and an enabling key device that are 
capable of being operably coupled to each other; 

5 
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b. encrypting said personal data in the smart card using a first encryption 
key and encrypting said personal data in the enabling key device using a second encryption 
key; and 

c. prohibiting a transaction between the smart card and another device 
5 unless the smart card and the enabling key device are operatively coupled together. 

Applicants' Argument 

Applicants assert the cited references do not disclose the features recited in 
10 independent claims J , 8, 14, and 18. 

To establish a prima facie case of obviousness, three basic criteria must be met First, 
Acre must be some suggestion or motivation, either in the reference or in the knowledge 
generally available to one of ordinary skill in the art to modify the reference or to combine the 
reference teachings . Second, there must be a reasonable expectation of success. Finally, the 
15 prior art references, when combined, must teach or suggest all of the claim limitations . The 
teaching or suggestion to make the claimed combination and the reasonable expectation of 
success must both be found in the prior art, and not based on applicant's disclosure (MPEP 
2142). The prior art must suggest the desirability of the claimed invention (MPEP 2143.01). 

Storck et al. uses an interfacing circuit that controls data transfer between one data 
20 carrier and another data carrier when the data carriers are identified as compatible (Abstract). 

Storck does not disclose a three party transaction between multiple devices and such is even 
admitted by the original Office Action. The Office Action only alleges Kramer discloses a 
three party transaction, a first interface circuit coupled to a memory device granting 
conditional access to a third device to data therein using an appropriate data exchange protocol 
25 between a first personal data storage device and a third device. 

Unfortunately, neither Storck nor Kramer disclose or suggest granting access to a third 
device to personal data therein only when a second data storage device is operatively coupled 
to a first data storage device. Such a feature is not disclosed in either reference. In fact, such 
a feature is not even alleged by the Office Action. Thus, the Office Action had failed to make 
30 a prima facie case of obviousness. 

Furthermore, the Office Action alleges it would have been obvious to one of ordinary 
skill in the art at the time the invention was made to modify Storck.. . to employ Kramer in 
order to enable optimum and secure two party and fliree party electronic transactions. 

6 
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Applicants disagree. The Office Action has not provided proper motivation to combine the 
references. In particular, Kramer does not provide motivation to combine its disclosed 
settlement of aggregated electronic transactions over a network, with Storck's disclosed 
method and device tor effecting a transaction between a first and at least one second data 
5 carrier. There is no disclosure in the references of how the teachings of Kramer's electronic 
transactions would be useful in combination with the teachings of Storck's data transfer 
between cards. 

As evidence of the lack of motivation, Applicants assert that the teachings of Kramer 
are not combinable with the teachings of Storck because they relate to different procedures. In 

10 particular, the "transaction" disclosed by Kramer is not the "transaction" disclosed by Storck. 
Kramer deals with transactions that relate to secure, electronic payment in change for goods 
and services purchases over a communication network (col. 1, lines 26-29). For example, 
Kramer discloses such transactions are those that can dispense some form of economic value, 
such as on-line payments and cashless payment transactions (col. 2, lines 23-28). 

1 5 Storck deals with a different kind of "transaction." In particular, Storck expressly 

discloses that "transactions'* are the transferring of data from one card to another (col, 11, lines 
34-38 and 52-56 and col. 1, lines 9-20). Copying data from one card to another is not a 
payment transaction. In particular, Storck involves copying data from a "master" card to a 
"virgin" card (col. 1 1 , lines 34-60). This is a different kind of transaction from the electronic 

20 payments disclosed in Kramer. Thus, the teachings of Kramer arc not combinable with the 
teachings of Storck because they relate to different procedures. 

Applicants also assert that none of the cited references disclose or suggest user data in 
either a first or second personal data storage device is accessible and usable only when the 
first and second personal data storage devices are in communication with each other* as 

25 recited in independent claim 8. 

The Office Action alleges Storck discloses data in either of first or second personal 
data storage device is accessible and usable only when first and second personal data storage 
devices are in communication with each other at col. 12, lines 45-48. Applicants disagree. Tn 
particular, the cited section states, "It is also possible to divide up an authorization level 

30 between two or several slave cards which will then need to be used in tt complimentary 

manner or simultaneously." Applicants assert this does not disclose data in either of first or 
second personal data storage device is accessible and usable only when first and second 
personal data storage devices are in communication with each other. In particular, the 
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statement of using two cards simultaneously docs not disclose that the cards are in 
communication with each olher. For example, the cards can be used simultaneously by using 
each card in communication with a separate device (which is not disclosed) without the cards 
being in communication with each other. In fact, there is no disclosure that this results in the 
5 cards being in communication with each other . Thus, the cited section does not disclose data 

in either of first or second personal data storage device is accessible and usable only when first 
and second personal data storage devices are in communication with each other. 

In fact, the cited section does not disclose data is accessible when devices are in 
communication with each other. The cited section only discloses an authorization level is 
10 divided up between two or several slave cards that need to be used in a complimentary manner 
or simultaneously. This is not the disclosure that data is accessible. In fact, there is no 
disclosure of what is authorized when two or several slave cards are used together. Thus, the 
cited section does not disclose data is accessible when cards arc in communication with each 
other. 

15 Furthermore, "simultaneously 5 * only describes slave cards being used at the same lime. 

It is not the disclosure of a two data storage devices being operatively coupled together. Using 
two devices in a complementary manner is not the disclosure of a two data storage devices 
being operatively coupled together. To the contrary, applicants are positively claiming only 
granting access to data only when two devices are operatively coupled together and such is not 

20 disclosed by Storck et al. 

The Office Action then states Storck does not disclose three party transactions and 
alleges Kramer discloses a three party transaction, a first interface circuit coupled to a memory 
device granting conditional access to a third device to data therein using an appropriate data 
exchange protocol between a first personal data storage device and a third device. 

25 Initially, Applicants would like to point out that three party transactions are not 

claimed in claim 8, Furthermore, as discussed above, neither Storck nor Kramer disclose or 
suggest granting access to data only when a second data storage device is operatively coupled 
to a first data storage device. Such a feature is not disclosed in either reference. In fact, such 
a feature is not even alleged by the Office Action. Thus, the Office Action has failed to make 

30 a prima facie case of obviousness. 

The Office Action also alleges it would have been obvious to one of ordinary skill in 
the art at the time the invention was made to modify Storck. . . to employ Kramer in order to 
enable optimum and secure two party and three party electronic transactions. Applicants 
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disagree. The Office Action has not provided proper motivation to combine the references. In 
particular, Kramer does not provide motivation to combine its disclosed settlement of 
aggregated electronic transactions over a network with the method and device disclosed in 
Storck for effecting a transaction between a first and at least one second data carrier. There is 
5 no disclosure in the references of how the teachings of Kramer would be useful in 

combination with the teachings of Storck and the Office Action has not provided a proper 
basis for such usefulness. 

Applicants also assert that none of the cited references disclose or suggest prohibiting 
a transaction between the smart card and another device unless the smart card and the enabling 
10 key device are operatively coupled together, as recited in independent claim 18. 

The Office Action alleges that Storck discloses at col. 12, lines 45-48 "prohibiting a 
transaction between the smart card and another device unless the smart card and the enabling 
key device are operatively coupled together." Applicants disagree and traverse the Office 
Action's mischaraeterizatioo of the Storck reference. Col. 12, lines 45-48 expressly disclose, 
15 "It is also possible lo divide up an authorization level between two or several slave cards 

which will then need to be used in a complimentary manner or simultaneously." This is not 
the disclosure of prohibiting a transaction between a smart card and another device unless the 
smart card and the enabling key device arc operatively coupled together. In fact, there is no 
disclosure of what the divided authorization is used for. Furthermore, this is not the 
20 disclosure of operatively coupling cards together. In an earlier section, the Office Action 
alleges complementary means two cards must operate together to complete authorization. 
However, this does not result In the two cards being operatively coupled together. For 
example, the cards may be separately coupled to another device in a complementary manner. 

Thus, the cited section does not disclose prohibiting a transaction between die smart 
25 card and another device unless the smart card and the enabling key device are operatively 

coupled together, as recited in independent claim 1 8. 

Furthermore, Storck et al. expressly discloses that a user can carry out any data 
processing operation in combination with one or several microcircuit cards (col. 13, lines 40- 
43). This is the exact opposite of the claimed granting access to data only when a second 
30 device is operatively coupled to the first device or prohibiting a transaction between a smart 
card and another device unless the smart card and an enabling key device are operatively 
couplet! together. In particular, this expressly illustrates that access is granted to the device in 
Fig. 4 to data in a first device, such as one microcircuit card, without the presence of a second 

9 

PAGE 10/20 • RCVD AT 3/14/2006 10:07:55 PM [Eastern Standard Time] * SVR:USPTO-EFXRF-2J17 * DNIS:2738300 ' CSID:18475232350* DURATION (mm*s):05-58 


MAR-14-E006 HI: 04 FROM : MOTOROLA PCS IPD 18475232350 


TO:USPTO 


P. 11/20 


Appl. No. 09/575,749 
Atty. Docket No. CS10614 

device, a second microcircuit card. This illustrates how Storck ct al. clearly docs not disclose 
granting access to data in a memory of a first device only when a second personal data storage 
device is opcrativcly coupled to the first device. 

With respect to the final Office Action, Applicants maintain that the cited references 
5 do not disclose or suggest user data in either a first or second personal data storage device is 
accessible and usable only when the first and second personal data storage devices are in 
communication with each other, as recited in independent claim 8. Applicants further 
maintain that the cited references do not disclose prohibiting a transaction between the smart 
card and another device unless the smart card aad the enabling key device are operatively 

10 coupled together, as recited in independent claim 1 8. 

The claimed features cannot be found in any of the cited references, in fact, the one 
reference, Storck, cited by the Office Action as disclosing the claimed feature actually teaches 
away from the claimed invention. In particular, Storck clearly discloses data in a card is 
accessible when two devices are not in communication. More particularly, Storck expressly 

1 5 discloses data in a card is accessible merely by entering a personal identification number (coL 
4, lines 54-58). Storck also clearly teaches the opposite of the claimed invention at coL 5, 
lines 64-68, which disclose "the ahil ity of a first microcircuit card to partially allocate its 
authorizations, functions, and data to a second microcircuit card or, in exceptional cases, to re- 
assign all of its authorizations, functions, and data.' 1 Thus, the second microcircuit card 

20 receives all authorizations and functions completely without the first microcircuit card. 
Therefore, data is accessible and usable when the cards are not in communication. 

The Office Action alleges Storck discloses data is not accessible and not usable when 
two specific carriers are not in commuaication with each other. The Office Action cites col. 4, 
lines 52-58 to support this allegation. However, col. 4, lines 52-58 only disclose "The 

25 invention further has the advantage of enabling a person owning or in possession of a card to 
read data contained therein. Obviously, this can mean that such information cannot be read 
until the owner has entered a personal identification number code. Any other operation 
carried out by the use of the card may necessitate the owner introducing said code." This cited 
section clearly teaches away from the claimed invention. In particular, die cited section 

30 indicates data can be accessed with the only limitation being that a personal identification 

number may be needed to access data. The cited section does not disclose anything about two 
data storage devices being in communication with each other. 

10 

PAGE 11120 1 RCVDAT 3(14/2006 10:07:55 PM [Eastern Standard Time] 1 SVKUBP WXRF-2T17 1 DNIS:2738300 ■ CSID:18475232350 • DURATION (mm-ss):05-58 


MRR-14-E006 £1:04 FROM : MOTOROLA PCS IPD 18475232350 


TO:USPTO 


P. 12^20 


Appl. No. 09/575,749 
Alty. Docket No. CS10614 

The Office Action then alleges, "in addition, the Storck prior art discloses the 
capability to split authorization between two cards. This requirement dictates the coupling... 
of two data carriers. . . to complete authorization and remain coupled together for operation." 
Applicants disagree. In particular, the Office Action had provided no foundation for this 
5 allegation and support for the allegation cannot be found in the cited references. 

The Office Action then cites col. 12 3 lines 45-48. As discussed in the above assertions, 
the cited section states, "It is also possible to divide up an authorization level between two or 
several slave cards which will then need to be used in a complimentary manner or 
simultaneously." Applicants assert this docs not disclose data in cither of first or second 
10 personal data storage device is accessible and usable only when first and second personal data 
storage devices are in communication with each other, la particular* the statement of using 
two cards simultaneously does not disclose that the cards are in communication with each 
other. For example, the cards can be used simultaneously by using each card in 
communication with a separate device (which is not disclosed) without the cards being in 
1 5 communication with each other. In fact, there is no disclosure that this results in the cards 
being in communication with each other . Thus, the cited section does not disclose data in 
either of first or second personal data storage device is accessible and usable only when first 
and second personal data storage devices are in communication with each other. 

In fact, the cited section docs not disclose data is accessible when devices arc in 
20 communication with each other. The cited section only discloses an authorization level is 

divided up between two or several slave cards that need to be used in a complimentary manner 
or simultaneously. This is not the disclosure that data is accessible. In fact, there is no 
disclosure of what is authorized when two or several slave cards are used together. Thus, the 
cited section does not disclose data is accessible when cards are in communication with each 
25 other. 

Furthermore, "simultaneously" only describes slave cards being used at the same time- 
It is not the disclosure of a two data storage devices being operativety coupled together. Using 
two devices in a complementary manner is not the disclosure of a two data storage devices 
being operatively coupled together. To the contrary, applicants are positively claiming only 
30 granting access to data only when two devices are operatively coupled together and such is not 

disclosed by Storck et al. 

The Office Action alleges, "By definition, complimentary is defined as "... 
compliment or something that completes. . , n Applicants disagree. In particular, Applicants 
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assert the Office Action hag provided no support for this definition. Thus, Applicants assert 
the definition cannot be used without proper support in the cited references. 

The Office Action cites sections in the references that illustrate how card content can 
be copied to another card. However, these sections do not require that two cards must be in 
5 communication lo allow a transaction to go forward. 

Therefore, the cited references do not disclose or suggest user data in either a first or 
second personal data storage device is accessible and usable only when the first and second 
personal data storage devices are in communication with each other, as recited in independent 
claim 8. Additionally, the cited references do not disclose prohibiting a transaction between 
10 the smart card and another device unless the smart card and the enabling key device are 
opcratively coupled together, as recited in independent claim 1 8. 

Applicants also maintain that none of the cited references disclose or suggest granting 
access to a third device to personal data therein only when a second data storage device is 
operatively coupled to a first data storage device, as recited in independent claim 1 and 
15 similarly recited in independent claim 14, 

The Office Action admits on page 3, 16-19 the principal objective of the prior art is to 
transfer data between a fist and second data carrier. Thus, the objective is not to grant access 
to a third device only when a second data storage device is operatively coupled to a first data 
storage device. 

20 Even so, regardless of the objective* the cited references do not disclose the claimed 

feature. The Office Action cites Storck, col. 5, lines 8-15. This section stales, "the second 
data carrier can comprise a carrier which is also in the form of a plug-in microcircuit element, 
Oris second data carrier being able to receive data during a transaction only in the case where 
said first data carrier is authorized to send data thereto, the data actually transferred being able 

25 to be limited by defined degree of authorization." This section does not disclose granting 

access to a third device to personal data therein only when a second data storage device is 
operatively coupled to a first data storage device. 

The Office Action then alleges Storck discloses, at col. 4, lines 31-34 and col. 5, line 
64 - col. 6, line 9, data can be transferred between a first and second personal data storage 

30 devices coupled together for authorization and a third device for data transfer. However, these 
sections do not support what the Office Action is alleging. In particular, col. 4 7 lines 31-34 
only disclose, "Yet a further object of the invention is to provide pocket-size equipment 
capable of carrying out, in an extremely simple manner, transactions between two or several 
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inicrocircuit cards." This does not disclose granting access to a third device io said personal 
data therein only when a second data storage device is operatively coupled to a first data 
storage device. 

Col. 5, line 64 - col. 6, line 9 disclose, "The term "delegation" should be taken to mean 
5 the ability of a first microcircuit card to partially allocate its authorizations, functious and data 
to a second microcircuit card or, in exceptional cases, lo re-assign all of its authorizations, 
functions and data. For example, a debitor in a commercial transaction can delegate, from his 
card which is loaded with a certain number of tokens, part of said tokens to a creditor's card, 
the "value" of this second card increasing immediately by an amount equal to the sum 

10 involved and the "value" of the second card being simultaneously reduced. This second card 
can, in its turn, delegate a part of the sum thus transferred to a third card, and so on, 
instantaneous payments being made in each case without the use of cash/' This also does not 
disclose granting access to a third device to personal data therein only when a second data 
storage device is operatively coupled to a first data storage device, 

1 5 The Office Action then cites col. 12, lines 45-48. This section discloses, "It is also 

possible to divide up an authorization level between two or several slave cards which will then 
need to be used in a complementary manner or simultaneously." The statement of using two 
cards simultaneously is not the disclosure of granting access to a third device to said personal 
data therein only when a second data storage device is operatively coupled to a first data 

20 storage device. As discussed above, the cards can be used simultaneously by using each card 
in communication with a separate device (which is not disclosed) without the cards being 
operatively coupled to each other. In fact, there is no disclosure that this results in the cards 
being operatively coupled to each odier. Thus, the cited section docs not disclose granting 
access to a third device to said personal data therein only when a second data storage device is 

25 operatively coupled to a first data storage device. In tact, the cited section states nothing about 

granting access to data to a third device. 

In section 2.3, the Office Action alleges Storck in view of Kramer discloses 
transactions utilizing smart card technology with three devices interconnected for the 
completion of transactions through network communications. The Office Action later states, 

30 "The designation of a vendor devices as one of transaction devices indicates Electronic 
Commerce, which is based on data transfers between devices interconnected over a 
communication network. The Storck prior art discloses operation in an e-commerce type 
environment" However, this does not provide motivation for combining the references. For 
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example, if the Office Action is alleging motivation is based on the fact thai the inventions can 
be combined because they are in the same technical field, this allegation does not amount to 
proper motivation. In particular, according to MPEP § 2143,01(111), "The mere fact that 
references can be combined or modified does not render the resultant combination obvious 
5 unless the prior art also suggests the desirability of the combination." In re Mills,, 91 6 F,2d 

680, 16 USPQ2d 1430 (Fed. Cir. 1990). Thus, the fact that both references allegedly mention 
Operation in electronic commerce does not provide proper motivation for combining the 
references. 

In section 2.4, the Office Action states thai the test for obviousness is what the 
1 0 combined teachings of the references would have suggested to those of ordinary skill in the 
art. Applicants agree. Unfortunately, the Office Action still has not provided proper 
motivation for combining the references and has not provided evidence to support its 
allegations. 

Thus, none of the cited references disclose or suggest granting access to a third device 
15 to said personal data therein only when a second data storage device is operatively coupled to 
a first data storage device, as recited in independent claim 1 and similarly recited in 
independent claim 14. 

Therefore, Applicants respectfully submit that independent claims 1, 8, 14, and 18 and 
define patentable subject matter. The remaining claims depend from the independent claims 
20 and therefore also define patentable subject matter. 


CONCLUSION 


In view of the discussion above, claims 1-19 of the present application are in condition 
25 for allowance. Kindly withdraw any rejections and objections and allow this application to 
issue as a United States Patent without further delay. 


14 
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Vm. CLAIMS APPENDIX 

Claims involved in the appeal: 

5 1 . A personal data storage apparatus comprised of: 

a. a first personal data storage device including a memory device storing: 
i. a first set of user data; 

ii a first encryption key for encrypting at least part of said first set 

of user data; 

10 b. a first interface circuit coupled to said memory device granting 

conditional access to a third device to data therein using an appropriate data exchange protocol 
between the first personal data storage device and the third device only when a second 
personal data storage device is operalively coupled to said first personal data storage device; 
and 

15 c, a second interface circuit coupled to said memory device and providing 

communications access to the second personal data storage device. 

2. The personal data storage apparatus of claim 1 further comprised of a 
processor, operatively coupled to said memory device and to said first and second interface 

20 circuits. 

3. The personal data storage apparatus of claim 1 wherein said second personal 
data storage device is operatively coupled to said first personal storage device using a 
mechanical coupling. 

25 

4. The personal data storage apparatus of claim 3 wherein, said mechanical 
coupling is a connector. 

5. The personal data storage apparatus of claim 1 wherein said second personal 
30 data storage device is operatively coupled to said fust personal storage device using a wireless 

connection. 
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6. The personal data storage apparatus of claim 5 wherein said wireless 
connection is a radio link. 

7. The personal data storage apparatus of claim 1 , where an agent of the issuer of 
5 the personal data storage apparatus can reclaim the user data from a single part of the personal 

data storage apparatus, 

8. A personal data storage apparatus comprised of: 

a. a first personal data storage device comprising: 
10 L a first memory device storing: 

1 . a first set of user data; 

2. a first encryption key for encrypting at least part said 

first set of user data; 

ii. a first interface circuit coupled to said memory device granting 
1 5 conditional access to data therein using a predetermined protocol and only when a second 

personal data storage device is operativcly coupled to said first personal data storage device; 

iii. a second interface circuit coupled to said memory device and 
providing access to a second personal data storage device; 

b. a second personal data storage device coupled to said first personal data 
20 storage device and being comprised of: 

i. the second memory device storing: 

1 . a substantially duplicate copy of said first set of user 

data; 

c. a second encryption key for encrypting at least part said first set of user 

25 data; 

ii. a second interface circuit coupled to said memory device 
granting conditional access to data therein using a predetermined protocol and only when said 
second personal data storage device is operatively coupled to said first personal data storage 
device; 

whereby user data in either said first or second personal data storage device is 
accessible and usable only when said first and second personal data storage devices are in 
communication with each other. 

17 
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9. The personat data storage apparatus of claim 8 wherein said firsl personal data 
storage device is further comprised of a processor, operatively coupled to said first memory 
device and to said first and second interface circuits, 

1 0. The personal data storage apparatus of claim 9 wherein said second personal 
data storage device is opcraliveiy coupled to said first personal storage device using a 
mechanical connector, 

5 

1 1 . The personal data storage apparatus of claim 8 wherein said second personal 
data storage device is operatively coupled to said first personal storage device using a wireless 
connection. 

10 12. The personal data storage apparatus of claim 8 wherein said wireless 

connection is a radio link. 

13. The personal data storage apparatus of claim 8, where an agent of the issuer of 
the personal data storage apparatus can reclaim the user data from a single part of the personal 

1 5 data storage apparatus, 

14. A method of securing access to data stored in a personal data storage device 
comprised of the steps of: 

a. storing personal data iu first and second data storage devices that are 
20 capable of being operably coupled to each other; 

b. encrypting said personal dala in a first data storage device using a first 
encryption key and cncrypling the data in said second data storage device using a second 
encryption key; and 

c. granting access to a third device to said personal data in either said first 
25 data storage device or said second data storage device only when said first and second data 

storage devices are operatively coupled together. 

1 5. The method of claim 14 wherein said step of granting access to a third device 
to said personat data in cither said first data storage device or said second data storage device 

30 only when said first and second personal data storage devices arc operatively coupled together 

18 
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is comprised of the step of granting access when said first and second personal data storage 
devices are coupled together through at least one of either a wireless data link or a mechanical 
connector. 

5 16. The method of claim 14 wherein data stored in said first storage device can be 

recovered from data stored in said second storage device. 

17. The method of claim 14 wherein said first and second encryption keys are the 

same. 

10 

1 8. A method of securing access to data stored in a personal data storage device 
comprised of the steps of: 

a. storing personal data in a smart card and an enabling key device that are 
capable of being operably coupled to each other; 
15 b. encrypting said personal data in the smart card using a first encryption 

key and encrypting said personal data in the enabling key device using a second encryption 
key; and 

c. prohibiting a transaction between the smart card and another device 
unless the smart card and the enabling key device are operatively coupled together. 

20 

19. The method of claim 1 X, wherein said step of prohibiting a transaction between 
the smart card and another device unless the smart card and the enabling key device are 
operatively coupled together is comprised of the step of prohibiting the transaction unless the 
smart card and the enabling key device arc coupled together through at least one of either a 

25 wireless data link or a mechanical connector. 
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